New issue
Advanced search Search tips
Note: Color blocks (like or ) mean that a user may not be available. Tooltip shows the reason.

Issue 759915 link

Starred by 1 user

Issue metadata

Status: Fixed
Owner:
Closed: Sep 2017
Cc:
Components:
EstimatedDays: ----
NextAction: ----
OS: Linux , Android , Windows , Chrome , Mac
Pri: 3
Type: Bug
Team-Security-UX



Sign in to add a comment

Use exact path matching for chrome://interstitials

Project Member Reported by lgar...@chromium.org, Aug 29 2017

Issue description

Right now, the following both show the same as chrome://ssl :

chrome://interstitials/ssllooww
chrome://interstitials/ssl-superfish

The first is a silly example, but the second could be misleading.

It would be better to match the path (excluding query and fragment) exactly, like servers do.

Found while reviewing crrev.com/c/639343
 
Description: Show this description
Owner: mea...@chromium.org
Status: Assigned (was: Untriaged)
Assigning to get out of triage queue.

Comment 3 by est...@chromium.org, Sep 10 2017

Cc: lgar...@chromium.org
Labels: Hotlist-GoodFirstBug OS-Android OS-Chrome OS-Linux OS-Mac OS-Windows
Owner: est...@chromium.org
I'm going to take this as a starter bug for Carlos next week.

Comment 4 by est...@chromium.org, Sep 11 2017

Cc: carlosil@google.com

Comment 5 by est...@chromium.org, Sep 11 2017

carlosil@ is taking this, but waiting till he gets his chromium account and edit bugs access before I can assign it to him.
Project Member

Comment 6 by bugdroid1@chromium.org, Sep 12 2017

The following revision refers to this bug:
  https://chromium.googlesource.com/chromium/src.git/+/347624883210ae4aa94bfc6b0c84e9faf5ecca2b

commit 347624883210ae4aa94bfc6b0c84e9faf5ecca2b
Author: Carlos IL <carlosil@google.com>
Date: Tue Sep 12 20:01:59 2017

Interstitial URLs now use exact path matching

URLs for manually opening chrome interstitials (chrome://interstitials/...) now
use exact path matching instead of only checking that the first characters match
(e.g. chrome://interstitials/ssl--invalid-- will not open
chrome://interstitials/ssl). Added a test that verifies this change.

R=estark@chromium.org

Bug:  759915 
Change-Id: I0d83709e54b83784c3f26a8d0511a77511d5fb63
Reviewed-on: https://chromium-review.googlesource.com/663204
Reviewed-by: Emily Stark <estark@chromium.org>
Commit-Queue: Carlos Joan Rafael Ibarra Lopez <carlosil@google.com>
Cr-Commit-Position: refs/heads/master@{#501370}
[modify] https://crrev.com/347624883210ae4aa94bfc6b0c84e9faf5ecca2b/chrome/browser/ui/webui/interstitials/interstitial_ui.cc
[modify] https://crrev.com/347624883210ae4aa94bfc6b0c84e9faf5ecca2b/chrome/browser/ui/webui/interstitials/interstitial_ui_browsertest.cc

Comment 7 by est...@chromium.org, Sep 12 2017

Labels: M-63
Status: Fixed (was: Assigned)
\o/

Sign in to add a comment